OPNsense Ghz small

Open source for your business!

OPNsense, truly turn-key solution.

Fully Supported

• Comprehensive Documentation & Inline Help
  OPNsense offers inline help in the User Interface for almost every item and Comprehensive online documentation including many how-to's with full step-by-step explanation of more complex setups. See the Docs
• Traffic Shaper
  A stateful firewall is a firewall that keeps track of the state of network connections (such as TCP streams, UDP communication) traveling across it. The firewall is programmed to distinguish legitimate packets for different types of connections. Only packets matching a known active connection will be allowed by the firewall; others will be rejected.

  1. Easy and flexible. Shaping rules are handled independently from the firewalll rules.
  2. Limit bandwidth by:
     1. Interface(s)
     2. Source & Destination
     3. Direction of traffic flow (in/out)
     4. Port number (application)
  3. Prioritise traffic. Add Queues and define weights.
• Captive Portal
  The Captive Portal allows you to force authentication, or redirection to a click through page for network access. This is commonly used on hot spot networks, but is also widely used in corporate networks for an additional layer of security on wireless or Internet access.

  1. Typical Applications
     1. Guest Network
     2. Hotel & Camping Wifi Access
     3. Bring Your Own Device (BYOD)
  2. Template Management
     1. URL redirection
     2. Option for your own Pop-up
     3. Custom Splash page
  3. Zone Management
  4. Authentication
     1. LDAP [Microsoft Active Directory]
     2. Radius
     3. Local User Manager
     4. Voucher / Tickets
     5. No Authentication (Splash screen only)
     6. Multiple (a combination)
  5. Voucher Manager
  6. Bandwidth Management, OPNsense's Build-in traffic shaper can be utilised to:
     1. Share bandwidth evenly
     2. Give priority to protocols port numbers and/or ip addresses
  7. Portal bypass. MAC and IP address can be white listed to bypass the portal.
• Caching Proxy
  OPNsense includes Squid, a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response times by caching and reusing frequently-requested web pages. Squid has extensive access controls and makes a great server accelerator.

  1. Multi interface support
  2. Transparent Proxy mode (including SSL)
  3. Authentication using LDAP,Radius or Local User Manager.
  4. Access Control
  5. Traffic Management
  6. Category Based Web Filtering. Native support for all major lists.
  7. FTP proxy
• Virtual Private Network
  A virtual private network (VPN) extends a private network across a public network, such as the Internet. It enables a computer to send and receive data across shared or public networks as if it is directly connected to the private network, while benefiting from the functionality, security and management policies of the private network.

  1. OpenVPN (SSL VPN). Site 2 Site and Road Warrior. Includes easy configuration exporter.
  2. IPsec Site 2 Site and Road Warrior.
  3. Legacy support for PPTP and L2TP.
• High Availability & Hardware Failover
  The Common Address Redundancy Protocol or CARP allows for hardware failover. Two or more firewalls can be configured as a failover group. If one interface fails on the primary or the primary goes offline entirely, the secondary becomes active.

  1. Includes configuration synchronization & synchronized state tables
  2. Can be combined with Traffic Shaper
• Intrusion Detection and Inline Prevention
  The inline IPS system of OPNsense is based on Suricata and utilises Netmap to enhance performance and minimize cpu utilisation. This deep packet inspection system is very powerful and can be used to mitigate security threats at wire speed.

  1. Protect against Bank Fraud using Feodo Tracker
  2. Includes Emerging Threats Community Rules
  3. SSL Finger printing support
  4. Includes Maxmind GeoLite2 Country
• Build-in reporting and monitoring tools
  1. System Health, the modern take on RRD Graphs
  2. Packet Capture
  3. Netflow Exporter
• Plugins support
  OPNsense supports custom plugins to extend the system even further.

  1. VMware tools
  2. Xen tools
  3. Hello word plugin for developers
• DNS Server & DNS Forwarder
  1. DNS Forwarder
  2. DNS Server
• DHCP Server and Relay
• Dynamic DNS
• Backup & Restore
  Better safe than sorry, always keep an up to date backup of your configuration. It’s easy with OPNsense.

  1. Encrypted cloud backup to Google Drive
  2. Configuration history with colored diff support
  3. Local drive backup & restore
• Stateful inspection firewall
• Granular control over state table
• 802.1Q VLAN support
• and more..
  see. opnsense.org for updates and news. Or the great and comprehesive documentation at the docs.opnsense.org

Screenshot(s)

Dashboard

System Health

Firmware